ganesh

Warn

Audited by Socket on Apr 13, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill's stated purpose is simple image hosting, but its only trust anchor is an unverified 'official API' URL on a questionable third-party domain. No direct malware or installer is present, but the ownership mismatch, weak provenance, and likely forwarding of images and a Client ID to unclear endpoints make the skill unsafe to trust as written.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Apr 13, 2026, 07:30 AM
Package URL
pkg:socket/skills-sh/billevansonline%2Fganesh-api-skill%2Fganesh%2F@770ef5e84d39366962ad154393367584a1cad104
Security Audit — socket — ganesh